Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: R9aSpZIoRh3ar6lebLOb7mPtdFABvSTbCSAn3z1lO/o=
Subject key identifier: 2A:5B:DF:F0:9E:63:72:E0:52:B0:D3:33:65:34:B0:B0:87:A6:7D:10
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 0198499C2CA94D35F1CC4CD19827F2A51EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: sRLUJUPln55hwKdEVF1JCkCbGKJGUV2atTJ/NlWdz/Q=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2c:a9:4d:35:f1:cc:4c:d1:98:27:f2:a5:1e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=2a5bdff09e6372e052b0d3336534b0b087a67d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:99:c3:55:c9:db:a4:81:09:97:ee:27:0d:
2d:4b:78:07:4e:04:c3:a8:0b:13:6f:db:7f:67:32:
0e:15:e0:11:dd:9c:ed:85:a9:4a:c0:60:ca:0b:ed:
9e:e2:83:5b:c0:5e:2b:51:fc:9a:57:9d:92:52:bb:
b9:81:17:aa:fe:37:4c:fc:b1:63:b8:67:ba:bd:7e:
98:e5:f2:c2:6e:14:12:f8:45:b2:ec:c2:ea:f4:60:
35:33:fc:9e:39:76:61:1d:d3:19:73:d8:2e:e1:f8:
86:b4:2b:b6:a6:3a:20:76:1c:06:2e:1c:ac:2a:7f:
ce:c9:16:a9:7b:ef:a9:f6:92:62:ca:13:6e:cc:85:
51:d0:95:60:b8:64:96:67:ba:1f:74:e6:10:32:1c:
e6:25:41:8a:e1:72:43:01:a9:33:ab:70:fe:49:f3:
ae:28:de:18:e0:5a:a5:c0:70:2f:90:39:0b:ee:e4:
9c:6e:7c:5b:8e:5c:0b:a2:d4:09:b2:ae:ab:a0:08:
43:c2:d8:16:1f:03:72:44:cd:ec:d4:4d:86:d1:85:
01:b2:5c:08:5e:45:28:20:9b:e5:3d:64:41:49:c1:
79:bf:fc:f2:e7:76:4f:b5:e8:2e:85:3a:d3:1c:46:
dd:9e:84:45:c2:de:31:77:bd:d3:32:0b:3c:82:c8:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:DF:F0:9E:63:72:E0:52:B0:D3:33:65:34:B0:B0:87:A6:7D:10
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8a:9a:ec:8b:15:ac:28:d0:dc:16:66:96:e6:d0:90:b2:16:
7d:b3:b6:52:54:49:9d:c3:54:b1:f1:9e:26:d0:84:d2:a9:b9:
7a:c0:47:91:0e:b6:7c:41:32:8c:61:d5:32:4b:d4:1d:f4:0f:
98:28:98:c8:78:b4:fd:4c:3e:c1:eb:a0:0b:da:5c:3f:f1:25:
64:f4:71:94:89:73:9d:b9:e9:c8:ad:76:de:ad:d7:f3:d9:92:
86:bd:85:b5:34:bc:74:d1:67:ae:69:ae:ff:05:c2:1c:75:b0:
bb:d7:0f:b5:9a:9c:a4:92:ef:a6:fd:17:84:cf:e0:7c:ee:3c:
18:22:40:60:26:ef:fb:54:f6:42:13:cb:c4:29:e3:de:a6:4d:
62:74:d6:86:d1:e8:5f:47:bf:fa:b3:86:58:71:48:a1:b0:4f:
9f:2f:bb:0d:e2:57:3e:8c:fd:19:fd:9e:a6:4a:f5:ce:58:79:
51:f7:ce:d1:ae:a4:c5:01:11:8f:51:ef:07:c5:32:ec:3a:dd:
62:7f:6c:5b:33:7d:db:a8:4b:b0:a0:a7:75:1e:3c:86:3a:3d:
6d:9a:19:91:b0:0f:dc:ae:1c:0e:12:ae:43:a9:71:eb:b6:1c:
ad:31:90:3c:0a:75:bb:40:7a:18:0f:89:4d:43:f4:fd:39:7a:
99:8d:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:57 2025 by rpki-client